Cyber Risks · PortSwigger Research

Install with default options - Port Swigger

Summary: PortSwigger's quick start guide for Burp Suite DAST walks through installing a standard single-machine instance with default settings, recommending at least 8 CPU cores and 24 GB of RAM, which supports one concurrent scan only. The guide notes the web server defaults to port 8080, requires creating an initial admin user named administrator, and states there are potential security implications to leaving the product in an unconfigured state.

What's compelling: The guide's own warning that an unconfigured DAST instance carries security implications, paired with a default port 8080 web server and an admin account whose credentials are not easily recovered, means a trial install left as-is is an exposed service with a single point of failure.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related